Risk and Insurance Management Society (RIMS) Certified Risk Management Professional (CRMP) Practice Exam

What can a risk management professional recommend to protect an organization's critical infrastructure from a cyber attack?

1. Implement password protocols

2. Buy a tower of cyber liability insurance

3. Ensure employees do not post on social media

4. Monitor employees' use of the internet

The correct answer is: Implement password protocols

Implementing password protocols is a crucial recommendation for protecting an organization's critical infrastructure from cyber attacks. Strong password practices, such as requiring complex passwords, regular updates, and multi-factor authentication, significantly reduce the risk of unauthorized access to sensitive systems and data. Passwords serve as the first line of defense in cyber security, and by enforcing robust protocols, the organization can help safeguard its digital assets against potential breaches. The other options, while they may offer some level of support in a broader security strategy, do not directly address the immediate and primary need for secure access controls. For instance, cyber liability insurance is essential for mitigating financial loss after a cyber incident but does not actively prevent attacks. Monitoring employees’ internet use and limiting social media posts can help with internal security awareness; however, these measures do not specifically address the vulnerabilities related to password management, which is fundamental in securing critical infrastructure.